People reach outside the Play Store to download APKs for emulators, early builds of apps, region-locked releases, modded versions of apps, and apps like betting and casino apps that are restricted by Google's store policies. Google has found that there is over 50 times more malware coming from internet-sideloaded sources than from apps on Google Play. Starting in September 2026, Google will require every developer to verify their identity for apps installed on certified Android devices, including sideloaded apps. To sideload without getting burned, users should pull APKs from reputable sources, match permissions to the job, keep Play Protect switched on, and revoke the "install unknown apps" permission after installation.